Azure scope hierarchy
Scope is where rules and access are applied—and it cascades down. Management groups → Subscriptions → Resource groups → Resources. Scope equals where a rule or access applies. Higher scope can affect many teams and environments. Use high scopes intentionally.